It’s caused by our wrong override of AUTHENTICATION_BACKENDS in configure, sorry for noise.

From: Larry Shen
Sent: Tuesday, March 30, 2021 6:22 PM
To: 'lava-users@lists.lavasoftware.org' <lava-users@lists.lavasoftware.org>
Subject: About device change permission.

Hi, guys,

I’m currently debug permission issue on our production master, it looks like next:

1. I set user e.g. “zz” to group “imxcn”, and assign device “imx8mm-evk-sh99” with the permission “change_device”.

But, in our production master, “zz”(not admin), can’t change the device status.

What’s strange is: I have a local master on my hand, on this master, I do the same configure, the non-admin user can change the device status.

2. I check the database of our production master as next;

auth_user:

39 | | 2021-03-30 08:37:32.98708+00  | f            | zz

auth_group:

8 | imxcn

auth_user_groups:

290 |      39 |        8

lava_scheduler_app_groupdevicepermission:

91 | imx8mm-evk-sh99                     |        8 |             9

92 | imx8mm-evk-sh99                     |        8 |             5

auth_permission:

5 | Can submit jobs to device               |               2 | submit_to_device

9 | Can change device                     |               2 | change_device

django_content_type:

2 | lava_scheduler_app   | device

Looks all data is ok, so, base on above data, do you know any possible reason why our production server can’t allow non-admin user change device permission? I’m a little lost as my local on hand server works, just central production server not work… Thanks.